Sandra has been actively scanning the client network on which she is doing a vulnerability
assessment test. While conducting a port scan she notices open ports in the range of 135 to 139.
What protocol is most likely to be listening on those ports?
A.
Finger
B.
FTP
C.
Samba
D.
SMB
Explanation:
The SMB (Server Message Block) protocol is used among other things for file
sharing in Windows NT / 2000. In Windows NT it ran on top of NBT (NetBIOS over TCP/IP),which
used the famous ports 137,138 (UDP) and 139 (TCP). In Windows 2000,Microsoft added the
possibility to run SMB directly over TCP/IP,without the extra layer of NBT. For this they use TCP
port 445.